AWS cli documentation change
Summary
Added TrainingPlanArn parameter for reserving GPU capacity via training plans and ExecutionRoleSessionNameMode parameter for execution role session naming
Security assessment
The TrainingPlanArn addition enables resource reservation but doesn't address security vulnerabilities. The ExecutionRoleSessionNameMode parameter improves security auditability by allowing session names to reflect user identities (IAM or IAM Identity Center) rather than static values, enhancing traceability for actions performed under the execution role.
Diff
diff --git a/cli/latest/reference/sagemaker/update-domain.md b/cli/latest/reference/sagemaker/update-domain.md index 7f1070972..b5dcb2b77 100644 --- a//cli/latest/reference/sagemaker/update-domain.md +++ b//cli/latest/reference/sagemaker/update-domain.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -432,0 +433,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -716,0 +731,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1026,0 +1055,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1291,0 +1334,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -1791,0 +1848,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2159,0 +2230,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -2829,0 +2914,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +>> +>> ExecutionRoleSessionNameMode -> (string) +>> +>>> The execution role session name mode. If this value is set to `USER_IDENTITY` , the session name of the execution role corresponds to the user’s identity. For IAM domains, the session name is the IAM session name used to generate the presigned URL. For IAM Identity Center domains, the session name is the username of the associated IAM Identity Center user. If this value is set to `STATIC` or is not set, the session name defaults to `SageMaker` . +>>> +>>> Possible values: +>>> +>>> * `STATIC` +>>> * `USER_IDENTITY` +>>> + @@ -2862 +2957,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2878 +2974,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2896 +2993,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2909 +3007,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2961 +3060,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -2988 +3088,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3058 +3159,2 @@ JSON Syntax: - ] + ], + "ExecutionRoleSessionNameMode": "STATIC"|"USER_IDENTITY" @@ -3317,0 +3420,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -3569 +3685 @@ Shorthand Syntax: - RStudioServerProDomainSettingsForUpdate={DomainExecutionRoleArn=string,DefaultResourceSpec={SageMakerImageArn=string,SageMakerImageVersionArn=string,SageMakerImageVersionAlias=string,InstanceType=string,LifecycleConfigArn=string},RStudioConnectUrl=string,RStudioPackageManagerUrl=string},ExecutionRoleIdentityConfig=string,SecurityGroupIds=string,string,TrustedIdentityPropagationSettings={Status=string},DockerSettings={EnableDockerAccess=string,VpcOnlyTrustedAccounts=[string,string],RootlessDocker=string},AmazonQSettings={Status=string,QProfileArn=string},UnifiedStudioSettings={StudioWebPortalAccess=string,DomainAccountId=string,DomainRegion=string,DomainId=string,ProjectId=string,EnvironmentId=string,ProjectS3Path=string,SingleSignOnApplicationArn=string},IpAddressType=string + RStudioServerProDomainSettingsForUpdate={DomainExecutionRoleArn=string,DefaultResourceSpec={SageMakerImageArn=string,SageMakerImageVersionArn=string,SageMakerImageVersionAlias=string,InstanceType=string,LifecycleConfigArn=string,TrainingPlanArn=string},RStudioConnectUrl=string,RStudioPackageManagerUrl=string},ExecutionRoleIdentityConfig=string,SecurityGroupIds=string,string,TrustedIdentityPropagationSettings={Status=string},DockerSettings={EnableDockerAccess=string,VpcOnlyTrustedAccounts=[string,string],RootlessDocker=string},AmazonQSettings={Status=string,QProfileArn=string},UnifiedStudioSettings={StudioWebPortalAccess=string,DomainAccountId=string,DomainRegion=string,DomainId=string,ProjectId=string,EnvironmentId=string,ProjectS3Path=string,SingleSignOnApplicationArn=string},IpAddressType=string @@ -3583 +3699,2 @@ JSON Syntax: - "LifecycleConfigArn": "string" + "LifecycleConfigArn": "string", + "TrainingPlanArn": "string" @@ -3897,0 +4015,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -4181,0 +4313,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2048` +>>>> * pattern: `(arn:aws[a-z\-]*:sagemaker:[a-z0-9\-]*:[0-9]{12}:training-plan/.*|None)` +>>>> + @@ -4495,0 +4641,14 @@ JSON Syntax: +>>> +>>> TrainingPlanArn -> (string) +>>> +>>>> The ARN of the SageMaker AI Training Plan to use for this app. When you specify a training plan, the app launches on reserved GPU capacity. This field is supported for JupyterLab and CodeEditor app types. +>>>> +>>>> For more information about how to reserve GPU capacity with SageMaker AI Training Plans, see [Using training plans in Studio applications](https://docs.aws.amazon.com/sagemaker/latest/dg/training-plan-utilization-for-studio-apps.html) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0`